$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: bNQzfukUVZJLYOlL+8QJiXXvRXwALQ7uXGMQetMNEgg= Subject key identifier: 7E:55:99:B0:2D:91:D7:78:30:D1:3F:7A:3B:13:C5:A0:E3:42:92:5E Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 290C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2836 Signing time: Fri 08 Aug 2025 15:43:51 +0000 Manifest this update: Fri 08 Aug 2025 15:43:51 +0000 Manifest next update: Fri 15 Aug 2025 15:43:51 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: mE+zZGM6NUH41bVnQXmqgDkoExCboEaQrS0gHrMxo1M=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: 6aOo70Q7K4tYLTCpg+ZsGuHxEyJ9A5waQxjGOykwyX4=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: NmAv5D2CaVnUAW5GRyHeMr9LmYZ9493N5ZLGZaYojd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10508 (0x290c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Aug 8 15:43:51 2025 GMT Not After : Aug 15 15:43:51 2025 GMT Subject: CN=68961b37-013e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:1d:15:5f:ec:9c:76:72:86:91:5b:37:45: a3:9f:bd:7e:2a:47:3c:6c:b3:bc:9d:a4:00:03:28: dc:5f:8b:d8:a1:4e:ae:da:1a:c6:b7:71:47:28:ff: 28:2c:bc:fb:bc:25:fa:3a:5d:84:0b:cb:da:c2:61: 82:c5:51:41:fe:c4:2d:29:d3:4b:08:06:21:29:a4: 8e:bc:1b:58:f3:80:35:96:bc:80:ce:c5:a8:b9:02: 1b:b3:bc:f2:60:0f:db:e8:db:97:ab:4f:88:25:e6: 94:63:8e:8b:8d:da:36:3b:11:23:82:02:09:8f:d4: 8b:9f:ee:f0:e2:e6:32:45:72:ac:c8:cd:f8:5f:4b: bd:42:4d:1b:a5:6d:a6:3f:02:59:41:48:69:74:98: d4:39:da:be:33:bc:c8:a5:12:89:87:c2:9f:a2:03: e2:a8:98:50:8a:10:39:9e:a2:2c:c1:69:1f:ff:c0: 76:03:9f:61:ef:58:e7:75:91:54:10:bd:5e:47:3e: 16:6a:95:5d:86:49:60:de:dd:4c:b8:57:28:1d:77: 4b:bd:05:71:1a:2a:e3:a2:30:05:f3:5a:d9:1f:e7: ea:45:ee:ed:b5:2d:6b:99:80:d1:1f:77:da:cd:cf: 32:4e:28:f0:cb:cc:8e:5d:00:19:b3:2b:ca:8d:d1: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:99:B0:2D:91:D7:78:30:D1:3F:7A:3B:13:C5:A0:E3:42:92:5E X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8d:8f:01:09:31:33:55:cb:71:fb:cb:78:15:1c:35:5d:54: 8a:3e:8c:cd:52:f0:82:80:4d:fe:b4:43:c2:1e:48:a7:f3:54: 99:96:79:03:6d:6c:63:56:16:bb:a5:5f:01:92:e2:fe:92:ca: 44:0e:35:ad:19:6f:8a:12:9f:72:96:22:7d:d8:dd:7e:99:5d: 9c:be:21:75:bc:be:0d:69:37:6e:cb:dd:b2:c8:95:af:bf:be: 13:47:7b:d5:5b:ac:6a:c7:e0:c1:00:26:dc:3b:3f:96:f6:fe: 49:45:af:d9:04:cf:b3:f7:7f:ab:15:da:be:ed:c2:ea:b4:ed: 60:05:8e:84:b4:4a:d8:da:82:ec:74:1c:55:39:b8:fb:05:63: a9:a1:32:49:63:b3:34:ec:18:dc:4e:58:f0:d8:21:24:5c:8a: 04:d0:9e:1f:ab:15:01:62:ae:18:91:7d:82:cb:59:9a:6d:b2: ac:d9:34:0a:cb:b9:12:34:18:ef:03:2e:8e:3c:e0:7c:b4:32: 52:60:51:df:ca:82:d3:ec:1a:9c:52:b0:c1:f4:73:28:6a:30: fa:cd:c5:a0:11:fa:e7:cf:25:22:b5:93:c8:ba:bb:19:c0:3e: db:f5:3b:6a:6f:9a:b8:3c:21:39:1c:8b:42:80:87:61:9f:4c: 37:fa:e9:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwODA4MTU0MzUxWhcNMjUwODE1MTU0MzUxWjAYMRYwFAYD VQQDEw02ODk2MWIzNy0wMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIAdFV/snHZyhpFbN0Wjn71+Kkc8bLO8naQAAyjcX4vYoU6u2hrGt3FHKP8o LLz7vCX6Ol2EC8vawmGCxVFB/sQtKdNLCAYhKaSOvBtY84A1lryAzsWouQIbs7zy YA/b6NuXq0+IJeaUY46Ljdo2OxEjggIJj9SLn+7w4uYyRXKsyM34X0u9Qk0bpW2m PwJZQUhpdJjUOdq+M7zIpRKJh8KfogPiqJhQihA5nqIswWkf/8B2A59h71jndZFU EL1eRz4WapVdhklg3t1MuFcoHXdLvQVxGirjojAF81rZH+fqRe7ttS1rmYDRH3fa zc8yTijwy8yOXQAZsyvKjdGnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5VmbAt kdd4MNE/ejsTxaDjQpJeMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgjY8BCTEzVctx+8t4FRw1XVSKPozNUvCCgE3+tEPCHkin81SZlnkD bWxjVha7pV8BkuL+kspEDjWtGW+KEp9yliJ92N1+mV2cviF1vL4NaTduy92yyJWv v74TR3vVW6xqx+DBACbcOz+W9v5JRa/ZBM+z93+rFdq+7cLqtO1gBY6EtErY2oLs dBxVObj7BWOpoTJJY7M07BjcTljw2CEkXIoE0J4fqxUBYq4YkX2Cy1mabbKs2TQK y7kSNBjvAy6OPOB8tDJSYFHfyoLT7BqcUrDB9HMoajD6zcWgEfrnzyUitZPIursZ wD7b9Ttqb5q4PCE5HItCgIdhn0w3+ume -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:45 2025 by rpki-client